diff --git a/.github/workflows/buildah.yml b/.github/workflows/buildah.yml
index 6eb8388..c5f6c5a 100644
--- a/.github/workflows/buildah.yml
+++ b/.github/workflows/buildah.yml
@@ -75,7 +75,7 @@ jobs:
           sudo apt-get install -y buildah podman
           mkdir -p $HOME/.local/bin
           curl -sSL -o $HOME/.local/bin/hadolint \
-            https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Linux-x86_64
+            https://github.com/hadolint/hadolint/releases/download/v2.14.0/hadolint-Linux-x86_64
           chmod +x $HOME/.local/bin/hadolint
           echo "$HOME/.local/bin" >> $GITHUB_PATH
 
diff --git a/tfroot-runner/Containerfile b/tfroot-runner/Containerfile
index 5c2b469..f5a2314 100644
--- a/tfroot-runner/Containerfile
+++ b/tfroot-runner/Containerfile
@@ -9,16 +9,16 @@
 ##############################
 # Pinned versions — update here
 ##############################
-ARG OPENTOFU_VERSION=1.11.6
-ARG SOPS_VERSION=3.12.2
-ARG TERRAFORM_DOCS_VERSION=0.22.0
-ARG TFUPDATE_VERSION=0.9.3
-ARG HCLEDIT_VERSION=0.2.17
-ARG TFLINT_VERSION=0.62.0
+ARG OPENTOFU_VERSION=1.12.3
+ARG SOPS_VERSION=3.13.1
+ARG TERRAFORM_DOCS_VERSION=0.24.0
+ARG TFUPDATE_VERSION=0.9.4
+ARG HCLEDIT_VERSION=0.2.18
+ARG TFLINT_VERSION=0.63.1
 ARG INFRACOST_VERSION=0.10.44
-ARG KUBECTL_VERSION=1.36.0
-ARG KUSTOMIZE_VERSION=5.8.0
-ARG CHECKOV_VERSION=3.2.525
+ARG KUBECTL_VERSION=1.36.2
+ARG KUSTOMIZE_VERSION=5.8.1
+ARG CHECKOV_VERSION=3.3.1
 ARG PRECOMMIT_VERSION=4.6.0
 ARG PYTHON_VERSION=3.14